CVE-2024-21977
Full vulnerability record from the local CVENow database.
Description
Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, potentially resulting in loss of integrity for SEV-SNP guests.
Severity
LOW
CVSS score
3.2
(v3.1)
Vulnerability status
Deferred
Source identifier
Published
2025-09-05 13:15:31.310000
Last modified
2026-11-09 10:10:00.217000
View original CVE JSON
{
"id": "CVE-2024-21977",
"sourceIdentifier": "[email protected]",
"published": "2025-09-05T13:15:31.310",
"lastModified": "2026-11-09T10:10:00.217",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, potentially resulting in loss of integrity for SEV-SNP guests."
},
{
"lang": "es",
"value": "Limpieza incompleta después de cargar un parche de microcódigo de CPU puede permitir a un atacante privilegiado degradar la entropía de la instrucción RDRAND, lo que podría resultar en la pérdida de integridad para los invitados SEV-SNP."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "AMD",
"product": "AMD EPYC™ 7003 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "MilanPI 1.0.0.D",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD EPYC™ 9004 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "GenoaPI 1.0.0.C",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD EPYC™ 8004 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "GenoaPI 1.0.0.C",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "ChagallWSPI-sWRX8 1.0.0.8",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "CezannePI-FP6_1.0.1.1",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "RembrandtPI-FP7/FP7r2_1.0.0.B",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 5000 Series Desktop Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "ComboAM4v2 1.2.0.Cb",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7000 Series Desktop Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "ComboAM5 1.2.0.1",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "PhoenixPI-FP8-FP7_1.1.0.3",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "RembrandtPI-FP7/FP7r2_1.0.0.B",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "DragonRangeFL1 1.0.0.3e",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "ChagallWSPI-sWRX8 1.0.0.8",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics",
"defaultStatus": "affected",
"versions": [
{
"version": "CezannePI-FP6_1.0.1.1",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 8000 Series Desktop Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "ComboAM5 1.2.0.1",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD EPYC™ Embedded 7003 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "EmbMilanPI-SP3 1.0.0.9",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD EPYC™ Embedded 9004 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "EmbGenoaPI-SP5 1.0.0.9",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Embedded 8000 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "EmbeddedPhoenixPI-FP7r2_1.2.0.0",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Embedded 7000 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "EmbeddedAM5PI 1.0.0.3",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Embedded 5000 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "EmbAM4PI 1.0.0.7",
"status": "unaffected"
}
]
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Embedded V3000 Series Processors",
"defaultStatus": "affected",
"versions": [
{
"version": "Embedded-PI_FP7r2 100A",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N",
"baseScore": 3.2,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.5,
"impactScore": 1.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-09-05T13:34:55.383175Z",
"id": "CVE-2024-21977",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-459"
}
]
}
],
"references": [
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html",
"source": "[email protected]"
},
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html",
"source": "[email protected]"
},
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html",
"source": "[email protected]"
}
]
}